June 2016 Archives

An idea to verify the correct format (eg: email format, phone number format) is simple. We need the “Regular Expression Pattern” of each format and using Selenium IDE to compare, the result will be Passed if your value match with Regular Expression Pattern, and Failed if your value does not match with that format pattern.

There are some common Regular Expression Pattern, but you can customize to meet the business if needed.

Email Regular Expression Pattern.

regexp:^[_A-Za-z0-9-\\+]+(\\.[_A-Za-z0-9-]+)*@[A-Za-z0-9-]+(\\.[A-Za-z0-9]+)*(\\.[A-Za-z]{2,})$

1	regexp:^[_A-Za-z0-9-\\+]+(\\.[_A-Za-z0-9-]+)@[A-Za-z0-9-]+(\\.[A-Za-z0-9]+)(\\.[A-Za-z]{2,})$

Generic email address.

regexpi:^[A-Z0-9+_.-]+@[A-Z0-9.-]+$

1	regexpi:^[A-Z0-9+_.-]+@[A-Z0-9.-]+$

Match a date in ‘mm/dd/yyyy’ format with any of the ‘-’, ‘/’, ‘.’ as separators.

regexp:(0[1-9]|1[012])[- /.](0[1-9]|[12][0-9]|3[01])[- /.](19|20)\d\d

1	regexp:(0[1-9]\|1[012])[- /.](0[1-9]\|[12][0-9]\|3[01])[- /.](19\|20)\d\d

Date Format (dd/mm/yyyy).

regexp:(0?[1-9]|[12][0-9]|3[01])/(0?[1-9]|1[012])/((19|20)\\d\\d)

1	regexp:(0?[1-9]\|[12][0-9]\|3[01])/(0?[1-9]\|1[012])/((19\|20)\\d\\d)

Password Regular Expression Pattern.

regexp:((?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#$%]).{6,20})

1	regexp:((?=.\d)(?=.[a-z])(?=.[A-Z])(?=.[@#$%]).{6,20})

Username Regular Expression Pattern.

regexp:^[a-z0-9_-]{3,15}$

1	regexp:^[a-z0-9_-]{3,15}$

URL Regular Expression Pattern.

regexp:^(https?|ftp|file)://.+$

1	regexp:^(https?\|ftp\|file)://.+$

————–

Example: Verify email and compare with Email Regular Expression Pattern by using Selenium IDE.

Command____Target____Value
verifyText ____ css=h1 ____(Regular Expression Pattern)

When I’m looking for the code of simple Captcha for my personal project, I found this solution: http://html-tuts.com/simple-php-captcha/

The idea of this Captcha is simple, user needs to input the correct value of basic calculating: A+B

But from the view points of tester, I asked myself: How can I bypass and break it?

I’m looking into the source code of demo Captcha site and there are some useful information there, with supporting of Selenium WebDriver I can make it very easy. Here’s my step:

Source:

package test;

import java.util.concurrent.TimeUnit;
import org.junit.After;
import org.junit.Before;
import org.junit.Test;
import org.openqa.selenium.By;
import org.openqa.selenium.WebDriver;
import org.openqa.selenium.WebElement;
import org.openqa.selenium.firefox.FirefoxDriver;

public class bypass_math_captcha {	
	private WebDriver driver;
	private String baseUrl;	

	@Before
	public void setUp() throws Exception {
		driver = new FirefoxDriver();
		driver.manage().window().maximize();
		baseUrl = "http://html-tuts.com";
		driver.manage().timeouts().implicitlyWait(30, TimeUnit.SECONDS);
	}

	@Test
	public void testGoogleTrans() throws Exception {
		driver.get(baseUrl + "/demo/simple-php-captcha/");
		//Get value of the first number
		WebElement first_value = driver.findElement(By.name("firstNumber"));
		String firstNumber = first_value.getAttribute("value");
		System.out.println(firstNumber);		
		
		//Get value of the second number
		WebElement second_value = driver.findElement(By.name("secondNumber"));
		String secondNumber = second_value.getAttribute("value");					
		System.out.println(secondNumber);
		
		//Get the value of firstNumber + secondNumber
		int Number1 = Integer.parseInt(firstNumber);
		int Number2 = Integer.parseInt(secondNumber);		
		int ExpectResult = Number1 + Number2;
		System.out.println("The result = " + ExpectResult);
		
		//Filling the result back to the website	
		String ExpectResultFilling = Integer.toString(ExpectResult);
		driver.findElement(By.name("captchaResult")).clear();		
		driver.findElement(By.name("captchaResult")).sendKeys(ExpectResultFilling);
		
		//Click button to submit
		driver.findElement(By.xpath("//input[@value='submit']")).click();
		
		//Verify bypass successful
		if (driver.getPageSource().contains("Captcha OK")) {
			System.out.println("Bypass the Captcha successful");
		} else {
			System.out.println("Failed");
		}				
	}

	@After
	public void tearDown() throws Exception {
		driver.quit();
	}
	
}

package test;

import java.util.concurrent.TimeUnit;

import org.junit.After;

import org.junit.Before;

import org.junit.Test;

import org.openqa.selenium.By;

import org.openqa.selenium.WebDriver;

import org.openqa.selenium.WebElement;

import org.openqa.selenium.firefox.FirefoxDriver;

public class bypass_math_captcha {

private WebDriver driver;

private String baseUrl;

@Before

public void setUp() throws Exception {

driver = new FirefoxDriver();

driver.manage().window().maximize();

baseUrl = "http://html-tuts.com";

driver.manage().timeouts().implicitlyWait(30, TimeUnit.SECONDS);

}

@Test

public void testGoogleTrans() throws Exception {

driver.get(baseUrl + "/demo/simple-php-captcha/");

//Get value of the first number

WebElement first_value = driver.findElement(By.name("firstNumber"));

String firstNumber = first_value.getAttribute("value");

System.out.println(firstNumber);

//Get value of the second number

WebElement second_value = driver.findElement(By.name("secondNumber"));

String secondNumber = second_value.getAttribute("value");

System.out.println(secondNumber);

//Get the value of firstNumber + secondNumber

int Number1 = Integer.parseInt(firstNumber);

int Number2 = Integer.parseInt(secondNumber);

int ExpectResult = Number1 + Number2;

System.out.println("The result = " + ExpectResult);

//Filling the result back to the website

String ExpectResultFilling = Integer.toString(ExpectResult);

driver.findElement(By.name("captchaResult")).clear();

driver.findElement(By.name("captchaResult")).sendKeys(ExpectResultFilling);

//Click button to submit

driver.findElement(By.xpath("//input[@value='submit']")).click();

//Verify bypass successful

if (driver.getPageSource().contains("Captcha OK")) {

System.out.println("Bypass the Captcha successful");

} else {

System.out.println("Failed");

}

@After

public void tearDown() throws Exception {

driver.quit();

}

Summary:
– With web admin and developer: Do not use this simple way to protect your website from flooding or spam.
– From hacker side: Can use this way or something similar to bypass the Captcha.
– For tester: View the source code (front-end) and make a decision what you can test.

Selenium IDE: Regular Expression Pattern

Bypass the basic math Captcha